Lucene search
K

7260 matches found

AstraLinux
AstraLinux
added 4 days ago6 views

Astra Linux – Vulnerability in GIMP

GIMP PNM File Parsing: Integer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a...

7.8CVSS8AI score0.00508EPSS
Exploits1References2
AstraLinux
AstraLinux
added 4 days ago5 views

Astra Linux – Vulnerability in GIMP

GIMP DCM File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...

7.8CVSS7.8AI score0.00569EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/06/15 12:0 p.m.29 views

CVE-2016-20067 WordPress CP Polls 1.0.8 Cross-Site Request Forgery

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in...

5.3CVSS0.00116EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/13 12:34 a.m.8 views

EUVD-2026-36634

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

4.6CVSS5.3AI score0.00225EPSS
Exploits0References3
NVD
NVD
added 2026/06/13 12:16 a.m.12 views

CVE-2026-11443

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

4.6CVSS0.00225EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/06/12 11:4 p.m.5 views

CVE-2026-11443 Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

4.6CVSS5.7AI score0.00225EPSS
Exploits0References2
CVE
CVE
added 2026/06/12 11:4 p.m.23 views

CVE-2026-11443

CVE-2026-11443 affects Allegra via the downloadAttachment method, where insufficient validation of user-supplied data enables cross-site scripting and an authentication bypass. This allows remote attackers to execute arbitrary script in the context of the current user after visiting a malicious p...

4.6CVSS5.3AI score0.00225EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/06/12 6:43 a.m.5 views

CVE-2026-12060 Hepta Platforms|Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

6.9CVSS5.3AI score0.00286EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/12 6:43 a.m.11 views

EUVD-2026-36390

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

6.9CVSS5.3AI score0.00286EPSS
Exploits0References2
CVE
CVE
added 2026/06/12 6:43 a.m.19 views

CVE-2026-12060

CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...

6.9CVSS5.3AI score0.00286EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/06/12 6:43 a.m.29 views

CVE-2026-12060 Hepta Platforms|Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

6.9CVSS0.00286EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/11 12:32 a.m.7 views

EUVD-2026-36156

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.7AI score0.00548EPSS
Exploits0References3
NVD
NVD
added 2026/06/10 10:16 p.m.7 views

CVE-2026-2049

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS0.00548EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.9 views

Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS5.8AI score0.00248EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.8 views

Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00266EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.8 views

Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS4.4AI score0.00245EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.9 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00266EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.11 views

Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS5.9AI score0.00248EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.11 views

Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.9AI score0.00223EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.8 views

Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00266EPSS
Exploits0References1
Rows per page
Query Builder